Deprecate chromium installer, add arm64 Linux support for chrome-headless-shell (#14334)

Deprecate `quarto install chromium` in favor of `chrome-headless-shell`.
The chromium command now prints a deprecation warning and transparently
redirects to chrome-headless-shell, preserving `--no-prompt` for CI
pipelines. The `afterInstall` hook automatically removes any legacy
chromium installation when chrome-headless-shell is installed.

Add arm64 Linux support for `quarto install chrome-headless-shell`
using Microsoft's Playwright CDN as the download source, since Chrome
for Testing has no arm64 Linux builds. The arm64 binary name difference
(`headless_shell` vs `chrome-headless-shell`) is abstracted by a
platform-aware helper.

- Chromium marked "(deprecated)" in tool registry, removed from help
  text examples; full removal planned for v1.11
- `quarto check install` warns when legacy chromium is detected
- Binder post-build scripts use chrome-headless-shell instead of
  chromium
- Path/version utilities extracted to chrome-headless-shell-paths.ts
  to break a circular dependency
- New `test-install.yml` CI workflow for arm64 install and chromium
  deprecation across all platforms

Closes #11877
Fixes #9710

Author: cderv

.github/workflows/test-install.yml

@@ -43,11 +43,109 @@ jobs:
           quarto install tinytex
 
       - name: Install Chrome Headless Shell
-        # arm64 Linux support requires #14334. Remove this condition once merged.
-        if: runner.arch != 'ARM64'
         run: |
           quarto install chrome-headless-shell --no-prompt
 
       - name: Verify tools with quarto check
         run: |
           quarto check install
+
+  test-chromium-deprecation:
+    name: Chromium deprecation redirect (${{ matrix.os }})
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [ubuntu-latest, ubuntu-24.04-arm, macos-latest, windows-latest]
+    runs-on: ${{ matrix.os }}
+    steps:
+      - name: Checkout Repo
+        uses: actions/checkout@v6
+
+      - uses: ./.github/workflows/actions/quarto-dev
+
+      - name: Make quarto available in bash (Windows)
+        if: runner.os == 'Windows'
+        shell: bash
+        run: |
+          quarto_cmd=$(command -v quarto.cmd)
+          dir=$(dirname "$quarto_cmd")
+          printf '#!/bin/bash\nexec "%s" "$@"\n' "$quarto_cmd" > "$dir/quarto"
+          chmod +x "$dir/quarto"
+
+      - name: Install chromium (should redirect to chrome-headless-shell)
+        id: install-chromium
+        shell: bash
+        run: |
+          set +e
+          output=$(quarto install chromium --no-prompt 2>&1)
+          exit_code=$?
+          set -e
+          echo "$output"
+          if echo "$output" | grep -Fq "is deprecated"; then
+            echo "deprecation-warning=true" >> "$GITHUB_OUTPUT"
+          fi
+          if [ "$exit_code" -eq 0 ]; then
+            echo "install-successful=true" >> "$GITHUB_OUTPUT"
+          fi
+
+      - name: Assert deprecation warning was shown
+        shell: bash
+        run: |
+          if [ "${{ steps.install-chromium.outputs.deprecation-warning }}" != "true" ]; then
+            echo "::error::Deprecation warning missing from 'quarto install chromium' output"
+            exit 1
+          fi
+          echo "Install deprecation warning found"
+
+      - name: Assert installation succeeded (via redirect)
+        shell: bash
+        run: |
+          if [ "${{ steps.install-chromium.outputs.install-successful }}" != "true" ]; then
+            echo "::error::Installation did not succeed — redirect to chrome-headless-shell may have failed"
+            exit 1
+          fi
+          echo "Installation succeeded via redirect"
+
+      - name: Verify quarto check shows Chrome Headless Shell
+        shell: bash
+        run: |
+          output=$(quarto check install 2>&1)
+          echo "$output"
+          if ! echo "$output" | grep -Fq "Chrome Headless Shell"; then
+            echo "::error::Chrome Headless Shell not detected by quarto check after redirect install"
+            exit 1
+          fi
+          if echo "$output" | grep -Fq 'chrome-headless-shell" to replace'; then
+            echo "::error::Legacy Chromium still installed — afterInstall should have removed it"
+            exit 1
+          fi
+
+      - name: Update chromium (should redirect) and capture result
+        id: update-chromium
+        shell: bash
+        run: |
+          set +e
+          output=$(quarto update tool chromium --no-prompt 2>&1)
+          exit_code=$?
+          set -e
+          echo "$output"
+          if echo "$output" | grep -Fq "is deprecated"; then
+            echo "deprecation-warning=true" >> "$GITHUB_OUTPUT"
+          fi
+          if [ "$exit_code" -eq 0 ]; then
+            echo "update-successful=true" >> "$GITHUB_OUTPUT"
+          fi
+
+      - name: Assert update deprecation warning was shown and succeeded
+        shell: bash
+        run: |
+          if [ "${{ steps.update-chromium.outputs.deprecation-warning }}" != "true" ]; then
+            echo "::error::Deprecation warning missing from 'quarto update tool chromium' output"
+            exit 1
+          fi
+          echo "Update deprecation warning found"
+          if [ "${{ steps.update-chromium.outputs.update-successful }}" != "true" ]; then
+            echo "::error::Update command failed — redirect to chrome-headless-shell may have failed"
+            exit 1
+          fi
+          echo "Update succeeded via redirect"

news/changelog-1.10.md

@@ -19,6 +19,15 @@ All changes included in 1.10:
 
 - ([#14281](https://github.com/quarto-dev/quarto-cli/issues/14281)): Avoid creating a duplicate `.quarto_ipynb` file on preview startup for single-file Jupyter documents.
 
+### `install`
+
+- ([#11877](https://github.com/quarto-dev/quarto-cli/issues/11877), [#9710](https://github.com/quarto-dev/quarto-cli/issues/9710)): Add arm64 Linux support for `quarto install chrome-headless-shell` using Playwright CDN as download source, since Chrome for Testing has no arm64 Linux builds.
+- ([#11877](https://github.com/quarto-dev/quarto-cli/issues/11877)): Deprecate `quarto install chromium` — the command now transparently redirects to `chrome-headless-shell`. Installing `chrome-headless-shell` automatically removes any legacy Chromium installation. Use `chrome-headless-shell` instead, which always installs the latest stable Chrome (the legacy `chromium` installer pins an outdated Puppeteer revision that cannot receive security updates).
+
+### `check`
+
+- ([#11877](https://github.com/quarto-dev/quarto-cli/issues/11877)): `quarto check install` now shows a deprecation warning when legacy Chromium (installed via `quarto install chromium`) is detected, directing users to install `chrome-headless-shell` as a replacement.
+
 ### `quarto create`
 
 - ([#14250](https://github.com/quarto-dev/quarto-cli/issues/14250)): Fix `quarto create` producing read-only files when Quarto is installed via system packages (e.g., `.deb`). Files copied from installed resources now have user-write permission ensured.

src/command/check/check.ts

@@ -364,6 +364,11 @@ async function checkInstall(conf: CheckConfiguration) {
       toolsJson[tool.name] = {
         version,
       };
+      if (tool.name === "Chromium (deprecated)") {
+        toolsOutput.push(
+          `${kIndent}      (Run "quarto install chrome-headless-shell" to replace)`,
+        );
+      }
     }
     for (const tool of tools.notInstalled) {
       toolsOutput.push(`${kIndent}${tool.name}: (not installed)`);

src/command/install/cmd.ts

@@ -46,10 +46,6 @@ export const installCommand = new Command()
     "Install Chrome Headless Shell",
     "quarto install chrome-headless-shell",
   )
-  .example(
-    "Install Chromium (legacy)",
-    "quarto install chromium",
-  )
   .example(
     "Choose tool to install",
     "quarto install",

src/command/uninstall/cmd.ts

@@ -37,10 +37,6 @@ export const uninstallCommand = new Command()
     "Uninstall Chrome Headless Shell",
     "quarto uninstall chrome-headless-shell",
   )
-  .example(
-    "Uninstall Chromium (legacy)",
-    "quarto uninstall chromium",
-  )
   .action(
     async (
       options: { prompt?: boolean; updatePath?: boolean },

src/command/update/cmd.ts

@@ -51,10 +51,6 @@ export const updateCommand = new Command()
     "Update Chrome Headless Shell",
     "quarto update tool chrome-headless-shell",
   )
-  .example(
-    "Update Chromium (legacy)",
-    "quarto update tool chromium",
-  )
   .example(
     "Choose tool to update",
     "quarto update tool",

src/command/use/commands/binder/binder.ts

@@ -223,12 +223,14 @@ const createPostBuild = (
     postBuildScript.push(msg("Installed TinyTex"));
   }
 
-  // Maybe install Chromium
+  // Maybe install Chrome Headless Shell for mermaid/graphviz rendering.
+  // Note: quartoConfig.chromium comes from QuartoTool type which uses "chromium"
+  // as a generic signal meaning "needs a headless browser", not the install command.
   if (quartoConfig.chromium) {
-    postBuildScript.push(msg("Installing Chromium"));
-    postBuildScript.push("# install chromium");
-    postBuildScript.push("quarto install chromium --no-prompt");
-    postBuildScript.push(msg("Installed Chromium"));
+    postBuildScript.push(msg("Installing Chrome Headless Shell"));
+    postBuildScript.push("# install chrome-headless-shell");
+    postBuildScript.push("quarto install chrome-headless-shell --no-prompt");
+    postBuildScript.push(msg("Installed Chrome Headless Shell"));
   }
 
   if (vscodeConfig.version) {

src/core/puppeteer.ts

@@ -16,7 +16,7 @@ import {
   chromeHeadlessShellExecutablePath,
   chromeHeadlessShellInstallDir,
   readInstalledVersion,
-} from "../tools/impl/chrome-headless-shell.ts";
+} from "../tools/impl/chrome-headless-shell-paths.ts";
 
 // deno-lint-ignore no-explicit-any
 // let puppeteerImport: any = undefined;